search

OpenImaging / miqa-phase1

A web application for medical imaging quality assurance
MIT License
20 stars 8 forks source link

Fix "We found a potential security vulnerability in one of your dependencies." from GitHub #40

Closed aashish24 closed 3 years ago

scottwittenburg commented 3 years ago

At the time @aashish24 created this issue, I believe the potential vulnerability was with highlight.js, and was assigned "moderate" severity. It looks like this vulnerability can be fixed by simply re-running the npm install and committing the resulting package-lock.json.

Yesterday, a new potential vulnerability was discovered with axios, which was assigned "high" severity. In order to pick up the fixed version, we may need girder/girder-web-components and InsightSoftwareConsortium/itk-js to update their dependency on axios.

thewtex commented 3 years ago

itk 13.3.1 has the updated axios

aashish24 commented 3 years ago

@scottwittenburg @thewtex has updated axios, do we need to get new version of GWC?

scottwittenburg commented 3 years ago

I think most, if not all, of these vulnerabilities are fixed in #91